Skip to content
OpenAdvisories
Unscored CVE-2002-1820 EUVD-2002-1799GHSA-6c7r-27gf-58jj

register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker…

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."

References